core

core-services

delete-from-index

(delete-from-index core event)(delete-from-index core fields event)

Deletes similar events from the index. By default, deletes events with the same host and service. If a field, or a list of fields, is given, deletes any events with matching values for all of those fields.

; Delete all events in the index with the same host (delete-from-index index :host event)

; Delete all events in the index with the same host and state. (delete-from-index index [:host :state] event)

merge-cores

reaper

(reaper)(reaper interval)(reaper interval opts)

Returns a service which expires states from its core’s index every interval (default 10) seconds. Expired events are streamed to the core’s streams. The streamed states have only the host and service copied, current time, and state expired. Expired events from the index are also published to the “index” pubsub channel.

Options:

:keep-keys A list of event keys which should be preserved from the indexed event in the expired event. Defaults to [:host :service], which means that when an event expires, its :host and :service are copied to a new event, but no other keys are preserved. The state of an expired event is always “expired”, and its time is always the time that the event expired.